Lucene search
+L

633 matches found

Cvelist
Cvelist
•added 2021/09/07 12:00 a.m.•58 views

CVE-2021-35267

NTFS-3G versions 2021.8.22, a stack buffer overflow can occur when correcting differences in the MFT and MFTMirror allowing for code execution or escalation of privileges when setuid-root...

8.5AI score0.00488EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2021/08/20 12:00 a.m.•20 views

PT-2021-5803 · Ntfs-3G +7 · Ntfs-3G +7

Name of the Vulnerable Software and Affected Versions: NTFS-3G versions prior to 2021.8.22 Description: A stack buffer overflow can occur when correcting differences in the MFT and MFTMirror, allowing for code execution or escalation of privileges when setuid-root. The vulnerability is related to...

7.8CVSS7.6AI score0.04794EPSS
SaveExploits14References346
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•25 views

SUSE: Security Advisory (SUSE-SU-2012:0682-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.7AI score0.0098EPSS
SaveExploits0References2
OSV
OSV
•added 2021/05/06 1:15 p.m.•37 views

CVE-2020-28010

Exim 4 before 4.94.2 allows Out-of-bounds Write because the main function, while setuid root, copies the current working directory pathname into a buffer that is too small on some common platforms...

7.8CVSS9.5AI score
SaveExploits0References2
Prion
Prion
•added 2021/05/06 1:15 p.m.•37 views

Design/Logic Flaw

Exim 4 before 4.94.2 allows Out-of-bounds Write because the main function, while setuid root, copies the current working directory pathname into a buffer that is too small on some common platforms...

7.2CVSS8.2AI score0.00417EPSS
SaveExploits1References2Affected Software1
AlpineLinux
AlpineLinux
•added 2021/05/06 3:17 a.m.•84 views

CVE-2020-28010

Exim 4 before 4.94.2 allows Out-of-bounds Write because the main function, while setuid root, copies the current working directory pathname into a buffer that is too small on some common platforms...

7.8CVSS7.7AI score0.00417EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/06 12:00 a.m.•5 views

CVE-2020-28010: Out-of-bounds Write

Exim 4 before 4.94.2 allows Out-of-bounds Write because the main function, while setuid root, copies the current working directory pathname into a buffer that is too small on some common platforms...

7.8CVSS7.7AI score0.00417EPSS
SaveExploits1References2
OSV
OSV
•added 2021/05/04 1:30 p.m.•18 views

UBUNTU-CVE-2020-28010

Exim 4 before 4.94.2 allows Out-of-bounds Write because the main function, while setuid root, copies the current working directory pathname into a buffer that is too small on some common platforms...

7.8CVSS7.7AI score0.00417EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2021/05/04 1:30 p.m.•42 views

CVE-2020-28010

Exim 4 before 4.94.2 allows Out-of-bounds Write because the main function, while setuid root, copies the current working directory pathname into a buffer that is too small on some common platforms...

7.8CVSS7.5AI score0.00417EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/05/04 12:00 a.m.•0 views

PT-2021-3128

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2 Description The issue is related to an out-of-bounds write in the main function of Exim, which can occur when the function, running with setuid root privileges, copies the current working directory pathname into a...

9.8CVSS0.61664EPSS
SaveExploits5References101
NVD
NVD
•added 2021/02/10 6:15 p.m.•34 views

CVE-2021-26936

The replay-sorcery program in ReplaySorcery 0.4.0 through 0.5.0, when using the default setuid-root configuration, allows a local attacker to escalate privileges to root by specifying video output paths in privileged locations...

7.8CVSS0.00513EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/02/10 6:15 p.m.•15 views

CVE-2021-26936

The replay-sorcery program in ReplaySorcery 0.4.0 through 0.5.0, when using the default setuid-root configuration, allows a local attacker to escalate privileges to root by specifying video output paths in privileged locations...

7.8CVSS7.4AI score0.00513EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/10 12:00 a.m.•6 views

CVE-2021-26936: Improper Privilege Management

The replay-sorcery program in ReplaySorcery 0.4.0 through 0.5.0, when using the default setuid-root configuration, allows a local attacker to escalate privileges to root by specifying video output paths in privileged locations...

7.8CVSS5.8AI score0.00513EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/02/10 12:00 a.m.•25 views

Sorcery Authorization Issues Vulnerability

An authorization issue vulnerability exists in ReplaySorcery that originates when using the default setuid root configuration, allowing a local attacker to escalate privileges to root by specifying the video output path in a privileged location...

7.8CVSS7.1AI score0.00513EPSS
SaveExploits1References2
OSV
OSV
•added 2021/01/15 6:15 p.m.•23 views

CVE-2021-0223

A local privilege escalation vulnerability in telnetd.real of Juniper Networks Junos OS may allow a locally authenticated shell user to escalate privileges and execute arbitrary commands as root. telnetd.real is shipped with setuid permissions enabled and is owned by the root user, allowing local...

7.8CVSS7.3AI score0.00383EPSS
SaveExploits0References1
NVD
NVD
•added 2020/06/23 8:15 p.m.•29 views

CVE-2020-14976

GNS3 ubridge through 0.9.18 on macOS, as used in GNS3 server before 2.1.17, allows a local attacker to read arbitrary files because it handles configuration-file errors by printing the configuration file while executing in a setuid root context...

5.5CVSS0.00483EPSS
SaveExploits1References4
OSV
OSV
•added 2020/06/23 8:15 p.m.•35 views

CVE-2020-14976

GNS3 ubridge through 0.9.18 on macOS, as used in GNS3 server before 2.1.17, allows a local attacker to read arbitrary files because it handles configuration-file errors by printing the configuration file while executing in a setuid root context...

5.5CVSS6.6AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2020/06/23 7:04 p.m.•35 views

CVE-2020-14976

GNS3 ubridge through 0.9.18 on macOS, as used in GNS3 server before 2.1.17, allows a local attacker to read arbitrary files because it handles configuration-file errors by printing the configuration file while executing in a setuid root context...

5.4AI score0.00483EPSS
SaveExploits1References4
OSV
OSV
•added 2020/06/23 8:33 a.m.•13 views

SUSE-SU-2020:1712-1 Security update for xawtv

This update for xawtv fixes the following issues: - CVE-2020-13696: Fixed an issue in setuid-root program that which could have allowed arbitrary file existence tests and open with ORDWR bsc1171655...

4.4CVSS4.8AI score0.00355EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/23 12:00 a.m.•4 views

CVE-2020-14976: Improper Privilege Management

GNS3 ubridge through 0.9.18 on macOS, as used in GNS3 server before 2.1.17, allows a local attacker to read arbitrary files because it handles configuration-file errors by printing the configuration file while executing in a setuid root context...

5.5CVSS5.9AI score0.00483EPSS
SaveExploits1References2
Rows per page
Query Builder